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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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earned patent term adjustment. See 37 CFR 1.704(b). 
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1 )□ Responsive to communication(s) filed on 09 August 2005 . 
2a)D This action is FINAL. 2b)£3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 7-53 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [X] Claim(s) 7-53 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 
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application from the International Bureau (PCT Rule 17.2(a)). 
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Remarks 

Claims 1-53 are pending. 

Response to Arguments 

1 . Applicant's arguments with respect to claims 1-53 have been considered 
but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 

U.S.C. 102 that form the basis for the rejections under this section made in this 

Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for patent or 
(2) a patent granted on an application for patent by another filed in the United States before 
the invention by the applicant for patent, except that an international application filed under 
the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

2. Claims 1-8, 11, 12, 14, 15, 17, and 53 are rejected under 35 U.S.C. 102(e) 
as being anticipated by Yarborough (U.S. Patent 6,718,388). 

Regarding Claim 1, 

Yarborough discloses a system for enabling a user to access 
a LAN from a remotely located host in a computer network (Column 
5, lines 41-64; and Figure 2), comprising: 
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A client proxy device adapted to receive a request of a client 
data processing device to access at least one network server 
(Column 6, lines 23-38); and 

A network connect module coupled to the client proxy 
device, wherein the network connect module, in response to the 
request, establishes a communication link including a data 
transmission link between the client proxy device and a proxy 
server coupled to the at least one network server (Column 7, lines 
9-64). 
Regarding Claim 2, 

Yarborough discloses a network server selector coupled to 
the client proxy device wherein the network server is selected using 
information included in the request from the client data processing 
device (Column 6, lines 23-49). 
Regarding Claim 3, 

Yarborough discloses a network server selector coupled to 
the client proxy device wherein the network server is selected using 
information of a port at the client proxy device that received the 
request (Column 6, lines 23-49). 
Regarding Claim 4, 

Yarborough discloses that the communication link between 
the client proxy device and the at least one network server includes 
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at least one port of the client proxy device and at least one port of 
the at least one network server (Column 6, lines 39-65). 

Regarding Claim 5, 

Yarborough discloses that the network connect module is 
arranged to generate a list of assignments between at least one 
port of the client proxy device and at least one port of the at least 
one network server (Column 6, lines 39-65). 

Regarding Claim 6, 

Yarborough discloses that the network connect module is 
arranged for retrieving mapping rules corresponding to the client 
proxy device and the proxy server, wherein the mapping rules 
include information on establishing the data transmission link 
between the client proxy device and the proxy server (Column 6, 
lines 50-57). 

Regarding Claim 7, 

Yarborough discloses that the mapping rules further include 
address information of the at least one network server in the LAN 
(Column 6, lines 50-57). 

Regarding Claim 8, 

Yarborough discloses that the network connect module 
comprises: 

A first sub-connection module including submapping rules 
having connection information of at least one port of the client proxy 
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device to at least one port of the proxy server (Column 6, lines 39- 
65); and 

A second sub-connection module including submapping 
rules having connection information of at least one port of the proxy 
server to at least one port of the at least one network server 
(Column 6, lines 39-65). 
Regarding Claim 11, 

Yarborough discloses that the data transmission link 
between the client proxy device and the proxy server is established 
through a firewall restricting access to the LAN (Column 5, lines 1- 
13; and Figure 2). 
Regarding Claim 12, 

Yarborough discloses that the communication link further 
comprises: 

A first mapping module including mapping rules having 
connection information of a port of the client proxy device to a port 
of the firewall (Column 7, lines 9-20; PPS to firewall); and 

A second mapping module including mapping rules having 
connection information of a port of the firewall to a port of the proxy 
server (Column 7, lines 9-20; GPS to firewall). 
Regarding Claim 14, 
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Yarborough discloses that the proxy server is located inside 
a firewall restricting access to the LAN from the outside (Column 5, 
lines 1-13; and Figure 2). 
Regarding Claim 15, 

Yarborough discloses that the proxy server is configured to 
allow access only to pre-selected network servers and services 
(Column 6, lines 23-57). 
Regarding Claim 17, 

Yarborough discloses a replacement module containing 
replacement information used when executing an application that is 
not proxy enabled, wherein the name of a network server is 
replaced by the name of the client proxy device and a specified port 
associated with the client proxy device (Column 6, lines 23-38). 
Regarding Claim 53, 

Yarborough discloses a system for enabling a user to access 
a LAN from a remotely located host in a computer network (Column 
5, lines 41-64; and Figure 2), comprising: 

A client proxy device coupled to and adapted to exchange 
data with a client data processing device upon a request of the 
client data processing device to access at least one network server 
in the LAN (Column 6, lines 23-38); and 

A connection module for establishing a communication link 
between the client proxy device and the at least one network server 
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upon the request of the client data processing device, wherein the 
communication link includes a data transmission link between the 
client proxy device and a proxy server device coupled to the at 
least one network server, and the connection module selects at 
least one network server in the LAN based on the request (Column 
6, lines 23-49; and Column 7, lines 9-64). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

3. Claims 10, 18-25, 27-29, 31, 32, 34-43, 45-47, 49, 50, and 52 are rejected 
under 35 U.S.C. 103(a) as being unpatentable over Yarborough in view of 
Wasserman (U.S. Patent 6,304,969). 
Regarding Claim 10, 

Yarborough does not disclose that the request of the client 
data processing device to access at least one network server is 
authorized prior to establishing the communication link. 

Wasserman, however, discloses that the request of the client 
data processing device to access at least one network server is 
authorized prior to establishing the communication link (Column 9, 
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line 1 2 to Column 1 1 , line 30). It would have been obvious to one 
of ordinary skill in the art at the time of applicant's invention to 
incorporate the authorization system of Wasserman into the secure 
session establishment system of Yarborough in order to verify that 
the server is a legitimate server that is authorized to serve the 
client, as well as allow the server to verify the identity of the client. 
Regarding Claim 36, 

Yarborough discloses a computer system comprising: 

A processor (Column 5, lines 41-64); and 

A memory storing a method for enabling a user to access a 
LAN from a client device in a publicly accessible computer network 
not directly connected to the LAN (Column 5, lines 41-64; and 
Figure 2), wherein upon execution of the method of the processor, 
the method comprises: 

Receiving at a client proxy device a data request from a 
client data processing device for data accessible from at least one 
network server in the LAN (Column 6, lines 23-38); 

Establishing a data transmission link between the client 
proxy device and a proxy server connected to the at least one 
network server in the LAN (Column 7, lines 9-20); and 

Establishing a communication link between the client proxy 
device and the at least one network server, wherein the 
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communication link includes the data transmission link (Column 7, 
lines 45-64); 

But does not disclose authorizing at least one network server 
to serve the data request of the client data processing device. 

Wasserman, however, discloses authorizing at least one 
network server to serve the data request of the client data 
processing device (Column 9, line 12 to Column 11, line 30). It 
would have been obvious to one of ordinary skill in the art at the 
time of applicant's invention to incorporate the authorization system 
of Wasserman into the secure session establishment system of 
Yarborough in order to verify that the server is a legitimate server 
that is authorized to serve the client, as well as allow the server to 
verify the identity of the client. 
Regarding Claim 18, 

Claim 18 is a method claim that corresponds to system claim 
36 and is rejected for the same reasons. 
Regarding Claim 35, 

Claim 35 is a computer program product claim that 
corresponds to system claim 36 and is rejected for the same 
reasons. 
Regarding Claim 37, 
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Yarborough discloses that the at least one network server 
serving the data request is selected based on a port of the client 
proxy device receiving the data request (Column 6, lines 23-49). 
Regarding Claim 19, 

Claim 19 is a method claim that corresponds to system claim 

37 and is rejected for the same reasons. 
Regarding Claim 38, 

Yarborough discloses that the at least one network server 
serving the data request is selected based on information included 
in the request (Column 6, lines 23-49). 
Regarding Claim 20, 

Claim 20 is a method claim that corresponds to system claim 

38 and is rejected for the same reasons. 
Regarding Claim 39, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Yarborough discloses that 
establishing a communication link between the client proxy device 
and the at least one network server includes a mapping of at least 
one port of the client proxy device to at least one port of the at least 
one network server (Column 6, lines 39-65). 
Regarding Claim 21, 

Claim 21 is a method claim that corresponds to system claim 

39 and is rejected for the same reasons. 
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Regarding Claim 40, 

Yarborough as modified by Wasserman discloses the 
system of claim 39, in addition, Yarborough discloses that the 
mapping includes generating a list of assignments between the at 
least one port of the client proxy device and the at least one port of 
the at least one network server (Column 6, lines 39-65). 
Regarding Claim 22, 

Claim 22 is a method claim that corresponds to system claim 

40 and is rejected for the same reasons. 
Regarding Claim 41, 

Yarborough as modified by Wasserman discloses the 
system of claim 40, in addition, Yarborough discloses retrieving a 
set of mapping rules, wherein the mapping rules include information 
on establishing the data transmission link (Column 6, lines 50-57). 
Regarding Claim 23, 

Claim 23 is a method claim that corresponds to system claim 

41 and is rejected for the same reasons. 
Regarding Claim 42, 

Yarborough as modified by Wasserman discloses the 
system of claim 41 , in addition, Yarborough discloses that the 
mapping rules further include address information of the at least 
one network server in the LAN (Column 6, lines 50-57). 
Regarding Claim 24, 
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Claim 24 is a method claim that corresponds to system claim 

42 and is rejected for the same reasons. 
Regarding Claim 43, 

Yarborough as modified by Wasserman discloses the 
system of claim 41, in addition, Yarborough discloses mapping at 
least one port of the client proxy device to at least one port of the 
proxy server (Column 7, lines 9-20); and 

Mapping the at least one port of the proxy server to at least 
one port of the at least one network server (Column 6, lines 50-65); 

Wherein the mapping is executed in accordance with the 
retrieved mapping rules (Column 6, lines 50-65). 
Regarding Claim 25, 

Claim 25 is a method claim that corresponds to system claim 

43 and is rejected for the same reasons. 
Regarding Claim 45, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Wasserman discloses that the 
request of the client data processing device to access at least one 
network server is authorized prior to establishing the 
communication link (Column 9, line 12 to Column 11, line 30). 
Regarding Claim 27, 

Claim 27 is a method claim that corresponds to system claim 
45 and is rejected for the same reasons. 
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Regarding Claim 46, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Yarborough discloses that the data 
transmission link between the client proxy device and the proxy 
server is established through a firewall restricting access to the 
LAN (Column 5, lines 1-13; and Figure 2). 
Regarding Claim 28, 

Claim 28 is a method claim that corresponds to system claim 

46 and is rejected for the same reasons. 
Regarding Claim 47, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Yarborough discloses mapping a 
port of the client proxy device to a port of the firewall and mapping 
the port of the firewall to a port of the proxy server (Column 7, lines 
9-20). 
Regarding Claim 29, 

Claim 29 is a method claim that corresponds to system claim 

47 and is rejected for the same reasons. 
Regarding Claim 49, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Yarborough discloses that the proxy 
server is located inside a firewall restricting access to the LAN 
(Column 5, lines 1-13; and Figure 2). 
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Regarding Claim 31, 

Claim 31 is a method claim that corresponds to system claim 

49 and is rejected for the same reasons. 
Regarding Claim 50, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Yarborough discloses that the proxy 
server is configured to allow access only to selected network 
servers (Column 6, lines 23-57). 
Regarding Claim 32, 

Claim 32 is a method claim that corresponds to system claim 

50 and is rejected for the same reasons. 
Regarding Claim 52, 

Yarborough as modified by Wasserman discloses the 
system of claim 36, in addition, Yarborough discloses replacing at 
the client data processing device the name of the at least one 
network server by the name of the client proxy device and a 
specific port of executing an application that is not proxy enabled 
(Column 6, lines 23-38). 
Regarding Claim 34, 

Claim 34 is a method claim that corresponds to system claim 
52 and is rejected for the same reasons. 
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4. Claims 9 and 13 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Yarborough in view of Crichton (U.S. Patent 6,104,716). 
Regarding Claim 9, 

Yarborough discloses secure communications across a 
public network (Column 7, line 65 to Column 8, line 21), but does 
not disclose that the link between the proxy server and the client 
proxy device is on a public network. 

Crichton, however, discloses that the link between the proxy 
server and the client proxy device is on a secure communication via 
a public network (Figure 4). It would have been obvious to one of 
ordinary skill in the art at the time of applicant's invention to 
incorporate the secure tunneling system of Crichton into the secure 
session establishment system of Yarborough in order to allow 
multiple private intranets to be connected in a public environment 
so that they can securely share each others resources as needed, 
such as when cooperating on a project. 
Regarding Claim 13, 

Yarborough does not disclose that the client data processing 
device is part of a client network and the data transmission link 
between the client proxy device and the proxy server is further 
established through a firewall restricting access to the client 
network. 
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Crichton, however, discloses that the client data processing 
device is part of a client network and the data transmission link 
between the client proxy device and the proxy server is further 
established through a firewall restricting access to the client 
network (Figure 4). It would have been obvious to one of ordinary 
skill in the art at the time of applicant's invention to incorporate the 
secure tunneling system of Crichton into the secure session 
establishment system of Yarborough in order to allow multiple 
private intranets to be connected in a public environment so that 
they can securely share each others resources as needed, such as 
when cooperating on a project. 

5. Claims 26, 30, 44, and 48 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Yarborough in view of Wasserman, further in view of Crichton 
Regarding Claim 44, 

Yarborough as modified by Wasserman discloses secure 
communications across a public network (Yarborough: Column 7, 
line 65 to Column 8, line 21), but does not disclose that the link 
between the proxy server and the client proxy device is on a public 
network. 

Crichton, however, discloses that the data transmission link 
between the proxy server and the client proxy device involves a 
secure communication via a public computer network (Figure 4). It 
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would have been obvious to one of ordinary skill in the art at the 
time of applicant's invention to incorporate the secure tunneling 
system of Crichton into the secure session establishment system of 
Yarborough as modified by Wasserman in order to allow multiple 
private intranets to be connected in a public environment so that 
they can securely share each others resources as needed, such as 
when cooperating on a project. 
Regarding Claim 26, 

Claim 26 is a method claim that corresponds to system claim 
44 and is rejected for the same reasons. 
Regarding Claim 48, 

Yarborough as modified by Wasserman does not disclose 
that the client data processing device is part of a client network and 
the data transmission link between the client proxy device and the 
proxy server is further established through a firewall restricting 
access to the client network. 

Crichton, however, discloses that the client data processing 
device is part of a client network and the data transmission link 
between the client proxy device and the proxy server is further 
established through a firewall restricting access to the client 
network (Figure 4). It would have been obvious to one of ordinary 
skill in the art at the time of applicant's invention to incorporate the 
secure tunneling system of Crichton into the secure session 
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establishment system of Yarborough as modified by Wasserman in 
order to allow multiple private intranets to be connected in a public 
environment so that they can securely share each others resources 
as needed, such as when cooperating on a project. 
Regarding Claim 30, 

Claim 30 is a method claim that corresponds to system claim 
48 and is rejected for the same reasons. 

6. Claim 16 is rejected under 35 U.S.C. 103(a) as being unpatentable over 

Yarborough in view of Pistriotto (U.S. Patent 6,138,162). 

Yarborough does not disclose that the client data processing 
device further comprises a registration module containing 
designation information wherein the client proxy device is 
designated as a proxy enabling execution of an application that is 
proxy enabled. 

Pistriotto, however, discloses that the client data processing 
device further comprises a registration module containing 
designation information wherein the client proxy device is 
designated as a proxy enabling execution of an application that is 
proxy enabled (Column 7, line 37 to Column 8, line 14). It would 
have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to incorporate the caching proxy system of 
Pistriotto into the secure session establishment system of 
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Yarborough in order to allow the client to connect to multiple 
proxies, each containing multiple proxy agents, each handling 
specialized requests, thus making the system more efficient. 



7. Claims 33 and 51 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Yarborough in view of Wasserman, further in view of Pistriotto. 
Regarding Claim 51, 

Yarborough as modified by Wasserman does not disclose 
registering the client proxy device as a proxy at the client data 
processing device for executing an application that is proxy enabled 

Pistriotto, however, discloses registering the client proxy 
device as a proxy at the client data processing device for executing 
an application that is proxy enabled (Column 7, line 37 to Column 
8, line 14). It would have been obvious to one of ordinary skill in 
the art at the time of applicant's invention to incorporate the caching 
proxy system of Pistriotto into the secure session establishment 
system of Yarborough as modified by Wasserman in order to allow 
the client to connect to multiple proxies, each containing multiple 
proxy agents, each handling specialized requests, thus making the 
system more efficient. 
Regarding Claim 33, 

Claim 33 is a method claim that corresponds to system claim 
51 and is rejected for the same reasons. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Jeffrey D. Popham whose telephone number 
is (571)-272-7215. The examiner can normally be reached on M-F 9:00-5:30. 

# 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Emmanuel Moise can be reached on (571)272-3865. The 
fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 




